Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
File: sO8ZvLI6LwTFhqwTEakbx8oql2U.mft (raw, json)
Hash identifier: 8j8VzMA6ven9mYBj0dKFx6thv0NqsNfg9BZoljPPoVU=
Subject key identifier: 4F:F0:DF:F3:E3:7D:F2:56:1B:76:8B:1E:EF:41:C9:6B:F5:A4:8F:42
Authority key identifier: B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
Certificate issuer: /CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Certificate serial: 019F91A3CB26A53EC04F4CE789DBEFD07A23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
Manifest number: 0DB9
Signing time: Fri 24 Jul 2026 01:00:58 +0000
Manifest this update: Fri 24 Jul 2026 01:00:58 +0000
Manifest next update: Sat 25 Jul 2026 01:00:58 +0000
Files and hashes: 1: OG9V497FCoHNGnPc_DbNqTEvF0Q.roa (hash: KoQeTtNBbhDRzvLnCdWBbN4ahOwIByARYlxscPU0UV4=)
2: sO8ZvLI6LwTFhqwTEakbx8oql2U.crl (hash: CyAs9SypMEvFDnV3dQiUGuntsirelJbx3mg+CeDYgvg=)
3: wA59sXSCzQX_lnDI9OMnkp5P6yQ.roa (hash: 3unU8/VgG8FeuLF+n9dZ02OE5LTcBxSZEPgG5bjCfR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:cb:26:a5:3e:c0:4f:4c:e7:89:db:ef:d0:7a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Validity
Not Before: Jul 24 01:00:58 2026 GMT
Not After : Jul 25 01:00:58 2026 GMT
Subject: CN=4ff0dff3e37df2561b768b1eef41c96bf5a48f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:1c:8a:a6:b1:95:24:af:60:7a:08:60:3f:
2d:15:84:0a:1e:34:1a:72:f7:62:b3:10:50:99:69:
99:dc:57:6c:02:91:89:2f:6a:78:00:fa:31:c8:cc:
e0:91:02:51:36:2e:3b:2e:ab:81:6d:fe:5b:67:08:
10:1e:ec:ab:26:2a:22:09:54:f4:ca:92:d1:d8:87:
74:3f:b6:45:b4:01:8d:75:d5:1a:62:a3:21:3b:3e:
7a:57:20:1e:96:ad:c5:67:cc:66:55:77:b6:9e:94:
69:03:d4:d3:b2:98:c3:70:6c:6e:e1:17:e2:42:ca:
cc:d8:c4:58:39:0d:78:40:45:2e:bc:30:83:cd:5e:
e9:43:af:5c:1e:0f:78:d3:2b:3f:2a:18:ec:55:3e:
1f:1e:28:28:49:26:70:f4:9a:63:1c:d9:d5:42:a4:
d3:44:29:f6:fc:fb:df:80:67:0c:c3:f9:58:87:0d:
ec:8d:99:b8:81:f9:df:00:e9:43:ae:64:db:d5:42:
c6:fc:06:f9:9a:aa:3b:e1:35:d3:d5:d8:a3:26:84:
bd:70:bb:db:c8:68:ba:4b:65:2f:a1:40:36:b2:35:
56:11:0e:c0:e8:bf:8c:6c:00:9e:b4:49:43:f0:4d:
7a:99:c4:9a:fb:b9:11:dd:48:e6:05:f7:fd:92:3b:
75:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F0:DF:F3:E3:7D:F2:56:1B:76:8B:1E:EF:41:C9:6B:F5:A4:8F:42
X509v3 Authority Key Identifier:
keyid:B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f9:1d:9c:5c:04:0e:f8:ad:49:1e:84:de:1d:fc:28:46:2a:
3d:79:be:cb:34:27:1b:13:89:ca:44:0f:f6:8a:da:85:a3:57:
1a:c6:25:eb:a6:e2:6b:3f:8b:55:e7:5e:4f:6a:43:df:ab:7c:
8e:93:8e:d4:a1:5b:cc:7b:89:37:61:20:83:fd:59:77:75:be:
bc:32:bd:e8:02:eb:a9:98:5b:82:49:94:05:2d:34:57:88:b5:
6f:a2:71:32:df:d0:3f:e6:79:28:82:da:1b:f1:73:1a:ad:09:
47:fd:32:96:92:9c:b6:cd:f1:f5:70:2e:1b:d7:64:11:7b:e0:
05:e6:5a:94:88:69:53:f5:45:de:36:50:49:10:ec:f0:b0:2c:
56:28:56:d3:56:a3:ab:53:93:65:de:7b:ee:76:0e:c2:c3:23:
74:29:63:07:f1:3b:f6:68:5c:f9:1c:53:8c:75:e7:8e:a2:55:
ce:02:5d:c1:5e:00:c3:bd:c0:8e:d4:5d:2c:ec:b3:48:62:94:
ff:f4:4d:cc:35:2a:87:0e:d2:99:53:e0:ec:35:de:89:3d:62:
74:5d:c9:5d:aa:bd:e0:a5:aa:2b:c9:08:cc:95:65:1c:97:3a:
56:f8:21:9d:08:95:55:1f:d0:ca:9a:d6:1f:40:48:5c:74:bc:
4a:f9:c4:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ro8smpT7AT0znidvv0HojMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZWYxOWJjYjIzYTJmMDRjNTg2YWMxMzExYTkxYmM3Y2Ey
YTk3NjUwHhcNMjYwNzI0MDEwMDU4WhcNMjYwNzI1MDEwMDU4WjAzMTEwLwYDVQQD
Eyg0ZmYwZGZmM2UzN2RmMjU2MWI3NjhiMWVlZjQxYzk2YmY1YTQ4ZjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMAciqaxlSSvYHoIYD8tFYQKHjQa
cvdisxBQmWmZ3FdsApGJL2p4APoxyMzgkQJRNi47LquBbf5bZwgQHuyrJioiCVT0
ypLR2Id0P7ZFtAGNddUaYqMhOz56VyAelq3FZ8xmVXe2npRpA9TTspjDcGxu4Rfi
QsrM2MRYOQ14QEUuvDCDzV7pQ69cHg940ys/KhjsVT4fHigoSSZw9JpjHNnVQqTT
RCn2/PvfgGcMw/lYhw3sjZm4gfnfAOlDrmTb1ULG/Ab5mqo74TXT1dijJoS9cLvb
yGi6S2UvoUA2sjVWEQ7A6L+MbACetElD8E16mcSa+7kR3UjmBff9kjt1xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/w3/PjffJWG3aLHu9ByWv1pI9CMB8GA1UdIwQY
MBaAFLDvGbyyOi8ExYasExGpG8fKKpdlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc084WnZMSTZMd1RGaHF3VEVha2J4OG9xbDJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9hZjNlNTEtNzlkNi00MDc4LWE1Njkt
ZDAwMDNhNmI1MjI0LzEvc084WnZMSTZMd1RGaHF3VEVha2J4OG9xbDJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9hZjNlNTEtNzlkNi00MDc4LWE1NjktZDAwMDNhNmI1MjI0
LzEvc084WnZMSTZMd1RGaHF3VEVha2J4OG9xbDJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/kdnFwE
DvitSR6E3h38KEYqPXm+yzQnGxOJykQP9orahaNXGsYl66biaz+LVedeT2pD36t8
jpOO1KFbzHuJN2Egg/1Zd3W+vDK96ALrqZhbgkmUBS00V4i1b6JxMt/QP+Z5KILa
G/FzGq0JR/0ylpKcts3x9XAuG9dkEXvgBeZalIhpU/VF3jZQSRDs8LAsVihW01aj
q1OTZd577nYOwsMjdCljB/E79mhc+RxTjHXnjqJVzgJdwV4Aw73AjtRdLOyzSGKU
//RNzDUqhw7SmVPg7DXeiT1idF3JXaq94KWqK8kIzJVlHJc6VvghnQiVVR/QyprW
H0BIXHS8SvnEBg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:12:02 2026 by rpki-client